Technical Information
- %TEMP%\1.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\1.tmp' --ping<Full path to file> EC0007EFB9571B84351714997E7E5FBB357A51D29821A3E9337B95A4597D9C21BA9E1908106BCDD42A1699D4DECF92E30ECCA065CA1AD148BC5ADB9A3276C0EE
- '%TEMP%\1.tmp' --ping<Full path to file> EC0007EFB9571B84351714997E7E5FBB357A51D29821A3E9337B95A4597D9C21BA9E1908106BCDD42A1699D4DECF92E30ECCA065CA1AD148BC5ADB9A3276C0EE' (with hidden window)
- '%ProgramFiles%\microsoft office\office12\winword.exe' /n /dde